(19) 



J 



(12) 



(43) Date of publication: 

26.07.2000 Bulletin 2000/30 



EuropSisches Patentamt 
European Patent Office 
Off ice europten des brevets (11) EP 1 022 683 A2 

EUROPEAN PATENT APPLICATION 

(51) IntCI. 7 : G07B 17/00 



(21) Application number: 99125306.3 

(22) Date of filing: 17.12.1999 



(84) Designated Contracting States: 


(72) Inventors: 


AT BE CH CY DE DK ES Fl FR GB GR IE IT LI LU 


• Ryan, Frederick W., Jr. 


NIC NL PT SE 


Oxford, Connecticut 06478 (US) 


Designated Extension States: 


• Weiant, Monroe A., Jr. 


AL LT LV MK RO SI 


Trumbull, Connecticut 06611 (US) 




• Twarog, Edward J. 


(30) Priority: 21.12.1998 US 217977 


Norwalk, Connecticut 06854 (US) 


(71) Applicant: PITNEY BOWES INC. 


(74) Representative: HOFFMANN - EITLE 


Stamford, Connecticut 06926-0700 (US) 


Patent- und Rechtsanwalte 




Arabellastrasse 4 




81925 Munchen (DE) 



CM 
< 

CO 
00 
CD 

CM 
CM 



(54) System and method for suppressing conducted emissions by a cryptographic device 



(57) System and method for performing crypto- 
graphic operations. At least one processor (20,22) per- 
forming cryptographic operations, memory (28) is 
coupled to the processor for use in performing the cryp- 
tographic operations; and a storage component (24,26) 
is coupled to the processor for storing and retrieving 
information calculated and used in the cryptographic 
operations. The processor, memory and storage com- 
ponent are securely enclosed (34) whereby direct 
access to the cryptographic operations is prevented. A 
first power source (30), which is external to the secure 



enclosure (34), is coupled to and supplies power to the 
processor, the memory and the storage component. A 
second power source (40), which is internal to the 
secure enclosure (34), is coupled to and supplies power 
to at least the processor. A switch is included for switch- 
ing from the first power source (30) to the second power 
source (40) when the cryptographic operations are 
being performed and for switching from the second 
power source to the first power source when non-cryp- 
tographic operations are being performed. 
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Description 

[0001] The present invention relates to methods 
and systems for performing cryptographic operations 
and is applicable generally to postage metering sys- 
tems and methods and to closed and open postage 
metering systems and methods employing crypto- 
graphic processes for. evidencing postage payment. . 
[0002] , The vast majority of the Posts around the 
world require prepayment for postal services provided 
by the Posts. This allows the Posts to avoid the substan- 
tial time and cost associated with a post-payment sys- 
tem that requires processing billing data and collecting 
and, . processing remittance. Prepayment, however, 
necessitates that individual mailpieces carry verifiable 
evidence of paid postage. The traditional postage stamp 
is a prime example of such evidence Although postage 
stamps are good for many applications by low volume 
mailers, for moderate to high volume mailers the appli- 
cation of stamps is difficult and costly and are subject to 
theft. Furthermore, stamps do not provide information 
such as date and place of mailing and provide limited 
postal revenue security. 

[0003] Arthur Pitney invented the first postage 
meter in 1902 to alleviate some shortcomings of post- 
age stamps. This postage meter was a mechanical 
device with securely coupled printing and accounting 
functions. The mechanical meter, which was perfected 
over the years, became a widespread basic business 
machine. With the advent of the microprocessor, the 
accounting and machine control functions were compu- 
terized when electronic postage meters were intro- 
duced in the late seventies. This enabled new features, 
including departmental accounting and computerized 
meter resetting. However, the fundamental security of 
postage evidencing remained the same 
[0004] Postal revenue security in the analog post- 
age meters, such as the mechanical and electronic 
postage meters, depends on two features: 1 ) physical 
security of the printing process, i.e., printing of postage 
evidence can not occur without appropriate accounting, 
and 2) forensic detectability. i.e.. fraudulent postal indi- 
cia can be distinguished from legitimate indacia. 
[0005] Coupling the printing and accounting mech- 
anism within a secure tamper-evident enclosure pro- 
vides physical security of printing. Inspection of the 
device normally reveals tampering. Effective forensic 
detectability of fraudulent postal indicia depends on 
non-availability of alternative mechanisms suitable for 
forging indicia Before the proliferation of inexpensive, 
high print quality computer printers, serious attempts to 
generate fraudulent indicia using an alternate printing 
mechanism were detectable. 

[0006] Today, the availability of inexpensive compu- 
ter-driven printers provides opportunities for customer 
convenience and cost advantages for printing postage 
evidence. However, the use of such printers requires a 
new way of securing postage which was first suggested 



in U. S. Patents 4,641.347, 4.641,346, 4,757,537, and 
4,775,246. At that time, it was realized that the security 
of postage evidencing depends on the security of the 
information printed in the indicium, including message 

5 authentication and integrity. U. S. Patents 4,831,555 
and 4,725,718 extended this idea to unsecured printing 
of postage disclosing the necessity that at least some of 
the information in the indicium must appear random to a 
party not in possession of some secret. Such random 

to looking information is commonly referred to as a digital 
token. 

[0007] The basis of postal revenue security in the 
digital world is two new requirements: 1) security of the 
digital token generating process, i.e., digital tokens can 

is not be generated without appropriate accounting, and 
2) automatic detectability, i.e., fraudulent digital tokens 
can be detected by automatic means. 
[0008] A cryptographic transformation applied to 
selected data on the mailpiece produces the digital 

20 token. The data may include postage value, date, postal 
code of the geographical deposit area, recipient 
address information, meter data, and piece count. Such 
data is commonly referred to, as postal data. The secret 
used to generate the digital token is generally a crypto- 

25 graphic key held within the accounting device. A verifier, 
with access to a verifying key corresponding to the 
accounting device secret, validates the digital token. 
Several cryptographic algorithms and protocols have 
been considered for this purpose. U. S. Patent 

30 4,853,961 describes critical aspects of public-key cryp- 
tography for mailing applications. See Jos6 Pastor, 
"CRYPTOPOST ™ A Universal Information- Based 
Franking System for Automated Mail Processing". Pro- 
ceedings of the Fourth Advanced Technology Confer- 

35 ence of the U. S. Postal Service, Vol. I, pp. 429-442. 
Nov. 1990. See also Jos6 Pastor. "CRYPTOPOST ™ A 
Cryptographic Application to Mail Processing", Journal 
of Cryptology, 3 (2), pp. 137-146, Nov. 1990. 
[0009] Two methods of presenting a postal verifier 

40 with fraudulent evidence of payment are a counterfeited 
indicium and a copied indicium. The former is an unpaid 
indicium that appears legitimate. The latter is a replay of 
a legitimate paid indicium. The present invention 
addresses the prevention of counterfeit indicium. 

45 [0010] A counterfeit indicium can be detected by 
verifying the digital token. Verification proves that the 
digital token was generated by a cryptographic algo- 
rithm with access to the secret meter key. The informa- 
tion printed in the indicium and access to a verifying key 

so are sufficient for the detection of counterfeited indicia as 
long as the secret meter key is confidential. In a public- 
key system, a digital signature provides the data 
authentication and integrity check" In a symmetric-key 
system a message authentication code (MAC) provides 

55 a similar check. Detection of counterfeiting is ah integ- 
rity check. 

[0011] Assuming integrity of the verification soft- 
ware and hardware, only a compromised meter secret- 
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key can produce Counterfeit indicia that passes an 
integrity check. This compromise could happen by vio- 
lating the physical protection of the key by tampering, or 
by deriving the key from indicia data by cryptanalysis. 
Generally, tampering is detectable if the physical protec- 
tion of the secure component of the postage metering 
system is adequate, for example following TIPS 140-1, 
Security Requirements for Cryptographic Modules, 
National Institute for Standards and Technology, Jan. 
1994. Robustness against cryptanalysis depends on 
the difficulty of solving certain mathematical problems, 
for example, discrete logarithm problems or factoring a 
large composite number. As part of its proposed Infor- 
mation-Based Indicia Program (IBIP) % the USPS has 
proposed 1024 bit RSA or 1024 bit DSS as a measure 
of robustness. 

[001 2] The IBIP is a distributed trusted system that 
is expected to support new methods of applying post- 
age in addition to, and eventually in lieu of, the current 
approach, which typically relies on a postage meter to 
mechanically print indicia on mailpieces. The IBiP 
requires printing large, high density, two dimensional I (2- 
D) bar codes on mailpieces. The Postal Service expects 
the IBIP to provide cost-effective assurance of postage 
payment for each mailpiece processed. 
[001 3] The USPS has published draft specif ications 
for the IBIP. The INFORMATION BASED INDICIA PRO- 
GRAM (IBIP) INDICIUM SPECIFICATION, dated June 
13, 1996, defines the proposed requirements for a new 
indicium that will be applied to mail being processed 
using the IBIP. The INFORMATION BASED INDICIA 
PROGRAM POSTAL SECURITY DEVICE SPECIFICA- 
TION, dated June 13, 1996, defines the proposed 
requirements for a Postal Security Device (PSD) that 
will provide security services to support the creation of 
a new "information based" postage postmark or indi- 
cium that will be applied to mail being processed using 
the IBIP. The INFORMATION BASED INDICIA PRO- 
GRAM HOST SYSTEM SPECIFICATION, dated Octo- 
ber 9, 1996, defines the proposed requirements for a 
host system element of the IBIP. The specif ications are 
collectively referred to herein as the "IBIP Specifica- 
tions". The IBIP includes interfacing user (customer), 
postal and vendor infrastructures which are the system 
elements of the program. 

[0014] There are three information security objec- 
tives critical for postage evidencing: authentication, 
wherein a Post can read a payment message printed on 
a mailpiece and identify the postage accounting device 
responsible for the message; data Integrity, wherein the 
Post can detect any alteration of thei payment message; 
and evidence of fraud, wherein the Post can detect evi- 
dence of fraud, such as a mailpiece with a counterfeited 
indicium or mailpieces with identical indicia. 
[0015] in order to achieve authentication, the pay- 
ment message must include an unique postage 
accounting device identification number and a message 
identification number, for example, a serial piece count 



or ascending register. The integrity of the payment itself 
requires inclusion of the postage amount. These ele- 
ments, collectively referred to as postal or security data, 
represent a minimal set. Depending on the verification 

5 strategy additional elements, including delivery address 
information, may be included. An indicium should, at a 
minimum, contain: 1) the security data, arid 2) the digital 
token produc<bd £> by 7 a" cryptographic transformation 
applied to the security data, drypitographic authentica- 

10 tion proves integrity of these elements " - 

[001 6J :: Presently, there are two postage metering 
types: closed systems arid open systems. In a closed 
system, the system functionality is solely dedicated to 
metering activity. Examples of closed system metering 

15 devices include conventional digital and analog 
(mechanical and electronic) postage meters wherein a 
dedicated printer is securely coupled to a metering or 
accounting function. In a closed system, since the 
printer is securely coupled and dedicated to the meter, 

20 printing evidence of postage cannot take place without 
accounting for the evidence of postage. In an open sys- 
tem, the printer is not dedicated to the metering activity, 
freeing system functionality for multiple and diverse 
uses in addition to the metering activity. Examples of 

25 open system metering devices include personal compu- 
ter (PC) based devices with single/multi-tasking operat- 
ing systems, multi-user applications and digital printers. 
An open system metering device is a postage evidenc- 
ing device with a non-dedicated printer that is not 

30 securely coupled to a secure accounting module. Open 
system indicia printed by the non-dedicated printer are 
made secure by including addressee information in the 
encrypted evidence of postage printed on the mailpiece 
for subsequent verification. 

35 [0017] Conventional closed system mechanical and 
electronic postage meters have heretofore secured the 
link between printing and accounting. The integrity of 
the physical meter box has been monitored by periodic 
inspections of the meters. Digital printing postage 

40 meters, which are closed system postage meters, typi- 
cally include a digital printer coupled to a metering 
(accounting) device, which is referred to herein as a 
postal security device (PSD). Digital printing postage 
meters have removed the need for physical inspection 

45 by cryptographically securing the link between the 
accounting and printing mechanisms. In essence, new 
digital printing postage meters create a secure point to 
point communication link between the accounting unit 
and printhead. See, for example, U.S. Patent No. 

so 4,802,218, issued to Christopher B. Wright et al and 
now assigned to the assignee of the present invention. 
An example of a digital printing postage meter with 
secure printhead communication is the Personal Post 
Office™ manufactured by Pitney Bowes Inc. of Stam- 

55 ford. Connecticut. An example of a digital printing post- 
age meter in a secure housing is the PostPerfect™ also 
manufactured by Pitney Bowes Inc. of Stamford, Con- 
necticut 
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[001 81 A recently published technique of Differential 
Power Analysis (DPA) has seriously threatened the 
security of cryptographic devices. The technique 
involves observation and analysis of fluctuations on the 
power line of a cryptographic device to determine the 
cryptographic secrets, i.e., the crypto keys, used by the 
device. 

[001 9] The DPA attack allows one to extract secret 
protected information from a supposedly secure crypto- 
graphic device by measuring variations in power con- 
sumption over time, and then applying sophisticated 
analysis to this information. Any type of secure crypto- 
graphic device that obtains its operating power from an 
external source is potentially susceptible to the attack. 
Such devices include smart cards, PC (PCMCIA) cards 
and printed circuit boards, including devices that are 
housed Within a protected enclosure. 
[0020] The attack is based on the principle that as 
the cryptographic processor performs its cryptographic 
functions, such as encryption or signing; trahisistors 
comprising the processor switch on and off, which 
changes the amount of current drawn from the source 
supplying power to the processor. Assuming the 
attacker has some knowledge of the functions per- 
formed by the cryptographic processor, the attacker can 
correlate the current changes with data being proc- 
essed and the crypto keys being used. The significance 
of the attack is as follows. 

[0021 ] Secure information systems are based on an 
assumption that the secret information, i.e., the crypto 
keys, stored within a secure cryptographic device are 
protected against disclosure to any attacker. It is well 
known to use physical tamper-resistant or tamper-proof 
physical security to prevent such disclosure. With such 
physical security in effect, it has been assumed that an 
attacker could only obtain crypto keys either by trying ail 
the possible crypto keys associated with the algorithm 
being used (symmetric algorithms) or by carrying out a 
complex mathematical search (asymmetric algorithms). 
For accepted cryptographic algorithms; this search is 
prohibitive, e.g. obtaining a 1024 bit RSA key requires 
2 30 years of 300Mhz PC computing. However, the DPA 
attack makes this assumption false. If the cryptographic 
device is subject to DPA attack, then the crypto key can 
be obtained in a matter of days or weeks using DPA. 
Thus it is imperative that the security community at 
large find means either to defeat this attack or to at least 
greatly lengthen the time and expertise needed to suc- 
cessfully carry it out. 

[0022] Many of the proposed courrtermeasures to 
the DPA attack involve the introduction of signal noise or 
filters on the power line, random timing and delays dur- 
ing cryptographic processing, and the introduction of 
extraneous operations. These courrtermeasures make 
the attack much more difficult However, an attacker can 
overcome them by obtaining more samples of power 
line fluctuations and applying more sophisticated ana- 
lytical techniques. 



[0023] It has been found that the present invention 
provides enhanced security and resistance to DPA 
attacks. The present invention provides a high level of 
resistance against the DPA attack by effectively discon- 
5 necting the source power line from the cryptographic 
device while critical operations are performed. As a 
result, the power fluctuations caused by individual oper- 
ations can not be observed by monitoring the power tine 
of the device. 

10 [0024] In accordance with the present invention, a 
charge obtained from the source power line is stored in 
a power storage device, such as a battery or capacitor 
when cryptographic operations are not being per- 
formed. During cryptographic operations, power for the 

15 cryptographic processing is drawn from the storage 
device, effectively disconnecting the cryptographic 
processor from the power input As a result, fluctuations 
on the power input cannot be correlated with individual 
cryptographic operations within the cryptographic 

20 device and a DPA attack cannot be performed on the 
device. •■»..-■ 
[0025] The above and other objects and advan- 
tages of the present invention will be apparent upon 
consideration of the following detailed description, taken 

25 in conjunction with accompanying drawings, in which 
like reference characters refer to like parts throughout, 
and in which: 

Fig. 1 is a block diagram of a traditional crypto- 

30 graphic device (prior art); 

Fig. 2 is a temporary power storage circuit for use 
with the device of Fig. 1 in accordance with an 
embodiment of the present invention; 
Fig. 3 is a block diagram of the storage circuit of Fig. 

35 2 integrated into the device of Fig. 1 in accordance 
with the preferred embodiment of the present inven- 
tion; 

Fig. 4 is a block diagram of the storage circuit of Fig. 
2 integrated into the device of Fig. 1 in accordance 
40 with an alternate embodiment of the present inven- 
tion; 

Rg. 5 is a graph which is representative of the cur- 
rent drawn by a portion of an RSA signature gener- 
ation performed by the device of Rg. 1 prior to 
45 implementation of the present invention; and 

Rg- 6 a graph which is represeintative of the current 
drawn by a portion of an RSA signature generation 
performed by the device of Rg. 1 after implementa- 
tion of the present invention. 

so 

[0026] Referring now to Fig. 1 . a block diagram of a 
traditional cryptographic device, generally designated 
10. is shown. Cryptographic device 10 includes a con- 
ventional processor 20, coupled to an optional coproc- 
55 essor 22. non-volatile memory 24, random access 
memory 26 and read-only memory 28. Cryptographic 
device 10 is enclosed within a secure housing 34. The 
secure housing 34 may be any conventional means for 
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preventing access, to cryptographic device 10. For 
example, secure housing 34 may be an integrated cir- 
cuit chip encased in an epoxy that prevents access to 
the integrated circuit without destruction of the inte- 
grated circuit. Power to cryptographic device 10 is input 5 
at power line 30. Input/output communications occur at 
I/O line 32. It will be understood that cryptographic 
device 10 may be implemented as any number of dis- 
crete components or as a single integrated circuit, such 
as a smart card. 10 
[0027] Referring now to Fig. 2, a power storage cir- 
cuit, generally designated 40, is shown that can be used 
with cryptographic device 10 in accordance with the 
present invention. Power storage circuit 40, which is , , - 
connected to power line 30 at line 36, includes a capac- is 
itor C1 , a transistor Q1 , and three resistors R1 , R2 and 
R3. By placing power storage circuit 40 between the 
external power input line 30 and crypto coprocessor 20, , 
the crypto coprocessor 20 can control whether power is 
supplied by the external power input at power line 30 or 20 
a storage device, in this case capacitor C1 . The transis- 
tor Q1 acts as a switch. In the preferred embodiment of 
the present invention, C1=0.04F, R 1=6800, R2=470, 
and R3=1 OKQ It will be understood that these are vari- 
able relative to each other for corresponding implemen- 25 
tations. 

[0028] Referring to Fig. 3, the power storage circuit 
40 is configured to provide power to coprocessor 22. 
When processor 20 determines that cryptographic 
operations are not being performed, the power control 30 
line, generally designated 42, is used to close the 
switch, i.e. transistor Q1 , allowing capacitor CI to accu- 
mulate charge. During cryptographic operations, proc- 
essor 20 opens the witch, transistor Q1, and the 
charge stored in capacitor C1 is used to power crypto- 35 
graphic coprocessor 22 through crypto power line, gen- 
erally designated 44. When the switch is open, no 
power fluctuations of cryptographic coprocessor 22 are 
conducted out the external power input line 30 and, 
therefore. DPA cannot be performed. 40 
[0029] Referring now to Fig. 4, an alternate embod- 
iment is shown wherein circuit 40 is configured to power 
the entire cryptographic device 10 and not just crypto 
coprocessor 22. This alternate embodiment is particu- 
larly suitable for preventing DPA when cryptographic as 
coprocessor 22 is not present in cryptographic device 
1 0 and processor 20 performs all cryptographic opera- 
tions. This alternate embodiment is also suitable when 
coprocessor 22 shares its input power with processor 
20, as shown in Fig. 1. However, it is noted that using so 
this alternate embodiment to power the entire crypto- 
graphic device 10 requires a larger capacitor than is 
needed to power only coprocessor 22. It is further noted 
that capacitor C1 is only one form of energy storage 
device and could be replaced by another storage 55 
device, such as a battery or inductor and its charging 
circuit. 

[0030] In some implementations, a storage device 
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large enough to supply power for the entire crypto- 
graphic operation cannot be implemented. For example, 
when cryptographic device 10 is a single integrated cir- 
cuit and power storage circuit 40 is part of the integrated 
circuit, a large enough capacitor CI to supply power for 
the entire cryptographic operation may not be available. 
In such implementations, a smaller storage device can 
be used to supply, power for part of the cryptographic 
operation. The cryptographic processing can be halted 
while the storage device recharges and resumed after 
the storage device has been sufficiently charged. Alter- 
natively, processing can continue while the storage 
device recharges. However, in either case information 
concerning the cryptographic key used in the crypto- 
graphic operation will be conducted out the external 
power input line 30 although not to the same degree as 
without the circuit in place. If either of these techniques 
is used in conjunction with the proposed countermeas- 
ures discussed previously (the introduction of signal 
noise or filters on the power line, random timing arid 
delays during cryptographic processing, and the intro- 
duction of extraneous operations) a high level of DPA 
resistance can be achieved. 

[0031] Referring now to Fig. 5, a graph is shown 
which is representative of the current drawn, as meas- 
ured at line 30, by a portion of an RSA signature gener- 
ation performed by cryptographic device 10 prior to 
implementation of the invention. The difference 
between squaring and multiply operations can be 
clearly seen. Multiply operations 52 require more power 
and therefore are represented by the higher peaks than 
squaring operations 50. The RSA key used can be eas- 
ily derived from the graph of Fig. 5. A 1 is represented 
by a square followed by a multiply (50-52 and 50"-52"), 
while a zero is represented by simply a square (50'). 
[0032] Referring now to Fig. 6, a graph is shown 
which illustrates the effectiveness of the present inven- 
tion. The same portion of the RSA signature generation 
as shown in Fig. 5 is depicted in Fig. 6 after the addition 
of power storage circuit 40 to cryptographic device 10. It 
is noted that the peaks representative of the square and 
multiply operations previously observable in Fig. 5 are 
no longer observable in Fig. 6. 

[0033] While the present invention has been dis- 
closed and described with reference to embodiments 
thereof, it will be apparent, as noted above, that varia- 
tions and modifications may be made therein. It is, thus, 
intended in the following claims to cover each variation 
and modification that falls within the true spirit and 
scope of the present invention. 

Claims 

1. A method of performing cryptographic operations 
with limited conducted emissions, the method com- 
prising the steps of: , , 

enclosing a cryptographic device within a phys- 
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- ically secure environment (34); 

providing power to the cryptographic device 
from a first power source (30), said first power 
source being external to the physically secure 
environment; and 

isolating at least a processor (20,22) perform- 
ing cryptographic operations in the crypto- 
graphic device from the first power source. 

2. The method of Claim 1 wherein the step of isolating 
comprises the steps of: 

locating a second power source (40) within the 
physically secure environment (34); and 
providing power to the processor from the sec- 
ond power source (40) at least when the proc- 
essor (20,22) is performing the cryptographic 
operations. 

3- The method of Claim 2 wherein the steps of provid- 
ing power comprise the steps of 

switching from the first power source to the 
second power source (40) when the processor 
is performing the cryptographic operations; and 
switching from the second power source (40) to 
the first power source when the processor is 
not performing the cryptographic operations 

4. The method of Claim 2 wherein the second power 
source (40) is a power storage circuit, the power 
storage circuit storing power from the external 
power source when cryptographic operations are 
not being performed and providing power to the 
processor when cryptographic operations are being 
performed. 

5. The method of Claim 4 wherein the cryptographic 
operations are cfivided into a plurality of segments 
and wherein the separate power source is storing 
power from the external power source between the 
segments. 

6. A method of limiting conducted emissions by a 
cryptographic device (10) performing cryptographic 
operations, the method comprising the steps of: 

enclosing the cryptographic device within a 
physically secure environment (34); 
providing power to the cryptographic device 
from a first power source (30), said first power 
source being external to the physically secure 
environment; and 

isolating in the cryptographic device from the 
first power source (30) at least when the cryp- 
tographic device is performing cryptographic 
operations. 



7. The method of Claim 6 wherein the step of isolating 
comprises the steps of: 

locating a second power source (40) within the 
5 physically secure environment; and 

providing power to the cryptographic device 
from the second power source (40) at least 
when the cryptographic device is performing 
the cryptographic operations. 

10 

8. The method of Claim 7 wherein the steps of provid- 
ing power comprise the steps of 

switching from the first power source to the 
75 . second power source when the cryptographic 

device is performing the cryptographic opera- 
tions; and 

switching from the second power source to the 
first power source when the cryptographic 
20 device is not performing the cryptographic 

operations. 

9. The method of Claim 7 wherein the separate power 
source is a power storage circuit, the power storage 

25 circuit storing power from the external power 
source when cryptographic operations are not 
being performed and providing power to the proc- 
essor when cryptographic operations are being per- 
formed. 

30 

10. A cryptographic system (10) for performing crypto- 
graphic operations, comprising: 

at least one processor (20,22) for performing 
35 cryptographic operations; 

memory means (28) coupled to the processor 
for use in performing the cryptographic opera- 
tions; 

storage means (24,26) coupled to the proces- 
40 sor for storing and retrieving information calcu- 

lated and used in the cryptographic operations; 
means (34) for securely enclosing said proces- 
sor (20,22), said memory means and said stor- 
age means whereby direct access to the 
45 cryptographic operations is prevented; 

a first power source (30) coupled to and sup- 
plying power to said processor, said memory 
means and said storage means, said first 
power source being external to said secure 
so enclosing means; 

a second power source (40) coupled to and 
supplying power to at least said processor, said 
second power source being internal to said 
secure enclosing means; and 
55 means (21) for switching from said first power 

source to said second power source when the 
cryptographic operations are being performed 
and for switching from said second power 
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source to said first power source when non- 
cryptographic operations are being performed. 

11. The system of Claim 10 wherein the second power 
source is a battery. , s 

12. The system of Claim 10 wherein said second power 
source is a power storage circuit. 

1 3. The system of Claim 1 0 wherein said second power . 10 
storage circuit includes a capacitor (CI), said 
capacitor bang charged during the non-crypto- 
graphic operations and being discharged to supply 
power to at least the processor during the crypto- 
graphic operations, is 

r' ' c 

14. The system of any one of Claims 10 to 13, operable 
to divide the cryptographic operations into a plural- 
ity of segments and to recharge the second power 
storage circuit between segments. 20 

15. A postage metering system comprising a crypto- 
graphic system according to any one of Claims 10 
to 14. 



16. A method of metering postage in which crypto- 
graphic operations are performed with limited con- 
ducted emissions according to the method of any 
one of Claims 1 to 9. 
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